resource "google_organization_access_approval_settings" "<%= ctx[:primary_resource_id] %>" {
  organization_id     = "<%= ctx[:test_env_vars]['org_id'] %>"
  notification_emails = ["testuser@example.com", "example.user@example.com"]

  enrolled_services {
  	cloud_product = "appengine.googleapis.com"
  }

  enrolled_services {
  	cloud_product = "dataflow.googleapis.com"
  	enrollment_level = "BLOCK_ALL"
  }
}
